Verify Required Ports Are Open Before Installing YugabyteDB or YBA

				
					#!/usr/bin/env bash
# Verify required YugabyteDB / YBA ports using netcat, with summary.
# Hardened: no 'set -e', works across nmap-ncat/GNU/BSD variants.

HOST=${1:-127.0.0.1}

# --- Port map (port -> description) ---
declare -A PORT_DESC=(
  # OS / Base
  [22]="SSH / Node Agent"
  [54422]="Custom SSH port for universe nodes"
  # YBA
  [80]="HTTP for YugabyteDB Anywhere"
  [8080]="Alternate HTTP for YugabyteDB Anywhere"
  [443]="HTTPS for YBA / backups"
  [8800]="Replicated / YBA Web UI"
  [9090]="Prometheus (metrics)"
  [9300]="Alert Manager"
  [13000]="YBA Node Agent RPC"
  # YugabyteDB Core
  [5433]="YSQL API"
  [6433]="Connection Pooling (optional)"
  [6379]="YEDIS API"
  [7000]="YB-Master Web UI"
  [7100]="YB-TServer Web UI"
  [9000]="YSQL Connection Manager"
  [9042]="YCQL API"
  [9100]="YB-TServer Internode RPC"
  [11000]="YB-Master RPC"
  [12000]="YB-TServer RPC"
  [18018]="YB Controller Web UI"
  [15433]="Yugabyted Standalone Web UI (optional)"
)

have_cmd(){ command -v "$1" >/dev/null 2>&1; }

# Try a few nc dialects; return 0 if port is open, 1 otherwise.
check_with_nc() {
  local host="$1" port="$2"
  # nmap-ncat / GNU netcat: supports -z (scan) and -w (timeout seconds)
  if nc -h 2>&1 | grep -q -- '-z'; then
    nc -z -w2 "$host" "$port" >/dev/null 2>&1
    return $?
  fi
  # BSD netcat: often uses -G for timeout, -z may still exist
  if nc -h 2>&1 | grep -q -- '-G'; then
    # -z may or may not exist; try a verbose connect and parse
    local out
    out="$( (echo | nc -v -G 2 "$host" "$port") 2>&1 )"
    grep -qiE 'open|succeed|Connected to' <<<"$out"
    return $?
  fi
  # Fallback: best-effort plain connect with a short timeout via timeout(1)
  if have_cmd timeout; then
    timeout 3 nc "$host" "$port" </dev/null >/dev/null 2>&1
  else
    nc "$host" "$port" </dev/null >/dev/null 2>&1
  fi
  return $?
}

if ! have_cmd nc; then
  echo "⚠️  netcat (nc) not found. Install with: sudo yum install -y nmap-ncat  # or: sudo apt-get install -y netcat"
  exit 1
fi

echo "🔍 Checking ports on $HOST using netcat..."
echo "---------------------------------------------------"

open_count=0
closed_count=0
declare -a closed_ports=()

# Sort ports numerically for stable output
for PORT in $(printf "%s\n" "${!PORT_DESC[@]}" | sort -n); do
  DESC=${PORT_DESC[$PORT]}
  if check_with_nc "$HOST" "$PORT"; then
    printf "✅ %-6s (%-45s) reachable on %s\n" "$PORT" "$DESC" "$HOST"
    open_count=$((open_count+1))
  else
    printf "❌ %-6s (%-45s) not reachable on %s\n" "$PORT" "$DESC" "$HOST"
    closed_count=$((closed_count+1))
    closed_ports+=("$PORT")
  fi
done

echo "---------------------------------------------------"
echo "📊 Summary for $HOST:"
printf "  ✅ %2d ports OPEN / reachable\n" "$open_count"
printf "  ❌ %2d ports CLOSED or FILTERED\n" "$closed_count"
if [ "$closed_count" -gt 0 ]; then
  echo "  🔒 Closed/Filtered ports: ${closed_ports[*]}"
fi
echo "---------------------------------------------------"
echo "✅ Completed check for host: $HOST"